@noodleseed/assistant 1.14.0 → 1.16.0

package/dist/{client-BKIeuSVS.d.cts → client-401BAJqk.d.cts}

@@ -22,6 +22,14 @@ interface AssistantErrorDetail {
     readonly code: string;
     readonly status?: number;
     readonly retryable: boolean;
+    /**
+     * The service's own refusal code, when it sent one — e.g. `daily_turn_budget_exhausted`.
+     *
+     * Additive beside `code` rather than replacing it: `code` is a published closed union that shipped
+     * consumers already switch on, so remapping it would break them. This is how a renderer tells a
+     * capacity decision apart from a fault.
+     */
+    readonly serviceCode?: string;
 }
 
 interface NamedEvent<Name extends string, Data> {
@@ -49,6 +57,17 @@ interface AssistantToolProposedDetail extends TurnDetail {
     /** Optional only for compatibility with assistant services published before named-event pinning. */
     readonly requiresConfirmation?: true;
 }
+/**
+ * A capability the visitor must sign in to reach (ADR 0201, 5.6b). `continuation` is the value the host
+ * page hands to its **own** backend, which spends it with its own client credentials; on its own it names
+ * a conversation and nothing more.
+ */
+interface AssistantAuthRequestedDetail extends TurnDetail {
+    readonly id: string;
+    readonly tool: string;
+    readonly continuation: string;
+    readonly expiresAt: string;
+}
 interface AssistantInputRequestedDetail extends TurnDetail {
     readonly id: string;
     readonly message: string;
@@ -90,6 +109,7 @@ type AssistantContentEvent = NamedEvent<'content', AssistantContentDetail>;
 type AssistantToolStartedEvent = NamedEvent<'tool_started', AssistantToolStartedDetail>;
 type AssistantToolProposedEvent = NamedEvent<'tool_proposed', AssistantToolProposedDetail>;
 type AssistantInputRequestedEvent = NamedEvent<'input_requested', AssistantInputRequestedDetail>;
+type AssistantAuthRequestedEvent = NamedEvent<'auth_requested', AssistantAuthRequestedDetail>;
 type AssistantInteractionResolvedEvent = NamedEvent<'interaction_resolved', AssistantInteractionResolvedDetail>;
 type AssistantToolCompletedEvent = NamedEvent<'tool_completed', AssistantToolCompletedDetail>;
 type AssistantViewAvailableEvent = NamedEvent<'view_available', AssistantViewAvailableDetail>;
@@ -126,7 +146,7 @@ interface AssistantUnrecognizedEvent {
     };
 }
 /** Closed event union for the DOM-free client; unknown future SSE names remain observable safely. */
-type AssistantClientEvent = AssistantContentEvent | AssistantToolStartedEvent | AssistantToolProposedEvent | AssistantInputRequestedEvent | AssistantInteractionResolvedEvent | AssistantToolCompletedEvent | AssistantViewAvailableEvent | AssistantErrorEvent | AssistantDoneEvent | NamedEvent<'interaction_proposed', AssistantLegacyInteractionProposedDetail> | AssistantClientLifecycleEvent | AssistantUnrecognizedEvent;
+type AssistantClientEvent = AssistantContentEvent | AssistantToolStartedEvent | AssistantToolProposedEvent | AssistantInputRequestedEvent | AssistantAuthRequestedEvent | AssistantInteractionResolvedEvent | AssistantToolCompletedEvent | AssistantViewAvailableEvent | AssistantErrorEvent | AssistantDoneEvent | NamedEvent<'interaction_proposed', AssistantLegacyInteractionProposedDetail> | AssistantClientLifecycleEvent | AssistantUnrecognizedEvent;
 
 type AssistantInteractionStatus = 'pending' | 'submitting' | 'accepted' | 'declined' | 'cancelled';
 interface AssistantConfirmationData {
@@ -165,6 +185,20 @@ interface AssistantChatState {
     readonly error?: AssistantChatError;
 }
 
+/** The exclusive choice, expressed so the wrong pair does not typecheck in the first place. */
+type AssistantSessionSourceOptions = {
+    /** The customer backend route that exchanges an embed secret for a session. */
+    readonly sessionEndpoint: string;
+    readonly embedId?: undefined;
+    readonly serviceUrl?: undefined;
+} | {
+    /** The non-secret public embed id `noodle deploy` printed. Safe in page source. */
+    readonly embedId: string;
+    /** Defaults to the hosted service; set it for a dev or self-hosted deployment. */
+    readonly serviceUrl?: string | undefined;
+    readonly sessionEndpoint?: undefined;
+};
+
 type AssistantContextValue = string | number | boolean | null;
 type AssistantContext = Readonly<Record<string, AssistantContextValue>>;
 interface AssistantClientContext {
@@ -192,8 +226,7 @@ interface AssistantSessionResponse {
     readonly configuration?: AssistantConfiguration;
 }
 
-interface CreateAssistantClientOptions<TPageContext extends AssistantPageContext = AssistantContext> {
-    readonly sessionEndpoint: string;
+interface AssistantClientBehaviorOptions<TPageContext extends AssistantPageContext = AssistantContext> {
     readonly fetch?: typeof fetch;
     /** Untrusted page context sent only when exchanging a session. */
     readonly context?: AssistantContext;
@@ -204,6 +237,12 @@ interface CreateAssistantClientOptions<TPageContext extends AssistantPageContext
     /** Latest renderer-selected summary included as untrusted data on every message turn. */
     readonly modelContext?: AssistantModelContextUpdate;
 }
+/**
+ * How the client is mounted: through the customer's backend (`sessionEndpoint`) or, on a public page
+ * with no backend at all, straight to the service with a non-secret `embedId`. The two are exclusive —
+ * see `session-source.ts` for why they are not merged.
+ */
+type CreateAssistantClientOptions<TPageContext extends AssistantPageContext = AssistantContext> = AssistantClientBehaviorOptions<TPageContext> & AssistantSessionSourceOptions;
 interface AssistantClient<TPageContext extends AssistantPageContext = AssistantContext> {
     subscribe(listener: (event: AssistantClientEvent) => void): () => void;
     /** Subscribe to detached AI SDK UIMessage state; the listener receives the current state immediately. */

package/dist/{client-BccAX_om.d.ts → client-Ii_xTV09.d.ts}

@@ -22,6 +22,14 @@ interface AssistantErrorDetail {
     readonly code: string;
     readonly status?: number;
     readonly retryable: boolean;
+    /**
+     * The service's own refusal code, when it sent one — e.g. `daily_turn_budget_exhausted`.
+     *
+     * Additive beside `code` rather than replacing it: `code` is a published closed union that shipped
+     * consumers already switch on, so remapping it would break them. This is how a renderer tells a
+     * capacity decision apart from a fault.
+     */
+    readonly serviceCode?: string;
 }
 
 interface NamedEvent<Name extends string, Data> {
@@ -49,6 +57,17 @@ interface AssistantToolProposedDetail extends TurnDetail {
     /** Optional only for compatibility with assistant services published before named-event pinning. */
     readonly requiresConfirmation?: true;
 }
+/**
+ * A capability the visitor must sign in to reach (ADR 0201, 5.6b). `continuation` is the value the host
+ * page hands to its **own** backend, which spends it with its own client credentials; on its own it names
+ * a conversation and nothing more.
+ */
+interface AssistantAuthRequestedDetail extends TurnDetail {
+    readonly id: string;
+    readonly tool: string;
+    readonly continuation: string;
+    readonly expiresAt: string;
+}
 interface AssistantInputRequestedDetail extends TurnDetail {
     readonly id: string;
     readonly message: string;
@@ -90,6 +109,7 @@ type AssistantContentEvent = NamedEvent<'content', AssistantContentDetail>;
 type AssistantToolStartedEvent = NamedEvent<'tool_started', AssistantToolStartedDetail>;
 type AssistantToolProposedEvent = NamedEvent<'tool_proposed', AssistantToolProposedDetail>;
 type AssistantInputRequestedEvent = NamedEvent<'input_requested', AssistantInputRequestedDetail>;
+type AssistantAuthRequestedEvent = NamedEvent<'auth_requested', AssistantAuthRequestedDetail>;
 type AssistantInteractionResolvedEvent = NamedEvent<'interaction_resolved', AssistantInteractionResolvedDetail>;
 type AssistantToolCompletedEvent = NamedEvent<'tool_completed', AssistantToolCompletedDetail>;
 type AssistantViewAvailableEvent = NamedEvent<'view_available', AssistantViewAvailableDetail>;
@@ -126,7 +146,7 @@ interface AssistantUnrecognizedEvent {
     };
 }
 /** Closed event union for the DOM-free client; unknown future SSE names remain observable safely. */
-type AssistantClientEvent = AssistantContentEvent | AssistantToolStartedEvent | AssistantToolProposedEvent | AssistantInputRequestedEvent | AssistantInteractionResolvedEvent | AssistantToolCompletedEvent | AssistantViewAvailableEvent | AssistantErrorEvent | AssistantDoneEvent | NamedEvent<'interaction_proposed', AssistantLegacyInteractionProposedDetail> | AssistantClientLifecycleEvent | AssistantUnrecognizedEvent;
+type AssistantClientEvent = AssistantContentEvent | AssistantToolStartedEvent | AssistantToolProposedEvent | AssistantInputRequestedEvent | AssistantAuthRequestedEvent | AssistantInteractionResolvedEvent | AssistantToolCompletedEvent | AssistantViewAvailableEvent | AssistantErrorEvent | AssistantDoneEvent | NamedEvent<'interaction_proposed', AssistantLegacyInteractionProposedDetail> | AssistantClientLifecycleEvent | AssistantUnrecognizedEvent;
 
 type AssistantInteractionStatus = 'pending' | 'submitting' | 'accepted' | 'declined' | 'cancelled';
 interface AssistantConfirmationData {
@@ -165,6 +185,20 @@ interface AssistantChatState {
     readonly error?: AssistantChatError;
 }
 
+/** The exclusive choice, expressed so the wrong pair does not typecheck in the first place. */
+type AssistantSessionSourceOptions = {
+    /** The customer backend route that exchanges an embed secret for a session. */
+    readonly sessionEndpoint: string;
+    readonly embedId?: undefined;
+    readonly serviceUrl?: undefined;
+} | {
+    /** The non-secret public embed id `noodle deploy` printed. Safe in page source. */
+    readonly embedId: string;
+    /** Defaults to the hosted service; set it for a dev or self-hosted deployment. */
+    readonly serviceUrl?: string | undefined;
+    readonly sessionEndpoint?: undefined;
+};
+
 type AssistantContextValue = string | number | boolean | null;
 type AssistantContext = Readonly<Record<string, AssistantContextValue>>;
 interface AssistantClientContext {
@@ -192,8 +226,7 @@ interface AssistantSessionResponse {
     readonly configuration?: AssistantConfiguration;
 }
 
-interface CreateAssistantClientOptions<TPageContext extends AssistantPageContext = AssistantContext> {
-    readonly sessionEndpoint: string;
+interface AssistantClientBehaviorOptions<TPageContext extends AssistantPageContext = AssistantContext> {
     readonly fetch?: typeof fetch;
     /** Untrusted page context sent only when exchanging a session. */
     readonly context?: AssistantContext;
@@ -204,6 +237,12 @@ interface CreateAssistantClientOptions<TPageContext extends AssistantPageContext
     /** Latest renderer-selected summary included as untrusted data on every message turn. */
     readonly modelContext?: AssistantModelContextUpdate;
 }
+/**
+ * How the client is mounted: through the customer's backend (`sessionEndpoint`) or, on a public page
+ * with no backend at all, straight to the service with a non-secret `embedId`. The two are exclusive —
+ * see `session-source.ts` for why they are not merged.
+ */
+type CreateAssistantClientOptions<TPageContext extends AssistantPageContext = AssistantContext> = AssistantClientBehaviorOptions<TPageContext> & AssistantSessionSourceOptions;
 interface AssistantClient<TPageContext extends AssistantPageContext = AssistantContext> {
     subscribe(listener: (event: AssistantClientEvent) => void): () => void;
     /** Subscribe to detached AI SDK UIMessage state; the listener receives the current state immediately. */

package/dist/client.cjs

@@ -22918,6 +22918,11 @@ function toAssistantClientEvent(event) {
         return event;
       }
       break;
+    case "auth_requested":
+      if (hasString(value, "id") && hasString(value, "tool") && hasString(value, "continuation") && hasString(value, "expiresAt") && hasOptionalTurnId(value)) {
+        return event;
+      }
+      break;
     case "interaction_resolved":
       if (hasString(value, "id") && (value.action === void 0 || isInteractionAction(value.action)) && hasOptionalTurnId(value)) {
         return event;
@@ -23102,6 +23107,21 @@ function hasToJsonProperty(value) {
   return false;
 }
 
+// src/session-source.ts
+var NOODLE_CLOUD_URL = "https://cloud.noodleseed.dev";
+var PUBLIC_SESSION_PATH = "/v1/assistant/public-sessions";
+function resolveSessionSource(options) {
+  const { sessionEndpoint, embedId, serviceUrl } = options;
+  if (Boolean(embedId) === Boolean(sessionEndpoint)) {
+    throw new Error("pass either embedId or sessionEndpoint, not both and not neither");
+  }
+  if (embedId) {
+    const base = (serviceUrl ?? NOODLE_CLOUD_URL).replace(/\/+$/, "");
+    return { kind: "public", url: `${base}${PUBLIC_SESSION_PATH}`, embedId };
+  }
+  return { kind: "exchange", url: sessionEndpoint };
+}
+
 // src/transport.ts
 var AssistantTransportError = class extends Error {
   code = "invalid_response";
@@ -23229,6 +23249,19 @@ function isAbortError2(error51) {
 }
 
 // src/client.ts
+async function refusalCode(response) {
+  try {
+    const body = await response.clone().json();
+    const code = body.code;
+    return typeof code === "string" ? code : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var UNRETRYABLE_SERVICE_CODES = /* @__PURE__ */ new Set([
+  "daily_turn_budget_exhausted",
+  "daily_session_budget_exhausted"
+]);
 var AssistantClientError = class extends Error {
   detail;
   constructor(detail, message, options) {
@@ -23238,7 +23271,7 @@ var AssistantClientError = class extends Error {
   }
 };
 var DefaultAssistantClient = class {
-  #sessionEndpoint;
+  #source;
   #fetch;
   #listeners = /* @__PURE__ */ new Set();
   #chat = new AssistantChatStateStore();
@@ -23250,8 +23283,7 @@ var DefaultAssistantClient = class {
   #active;
   #pendingAppInteractions = /* @__PURE__ */ new Map();
   constructor(options) {
-    if (!options.sessionEndpoint) throw new Error("sessionEndpoint is required");
-    this.#sessionEndpoint = options.sessionEndpoint;
+    this.#source = resolveSessionSource(options);
     this.#fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
     this.#context = options.context ? { ...options.context } : void 0;
     this.#modelContext = options.modelContext ? copyAssistantModelContext(options.modelContext) : void 0;
@@ -23467,11 +23499,14 @@ var DefaultAssistantClient = class {
       return;
     }
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "turn_failed",
         `Assistant turn failed (${response.status})`,
         false,
-        response.status
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     await this.#consume(response);
@@ -23510,23 +23545,25 @@ var DefaultAssistantClient = class {
     }
   }
   async #createSession(signal) {
-    const response = await this.#request(
-      this.#sessionEndpoint,
-      {
-        method: "POST",
-        headers: { Accept: "application/json", "Content-Type": "application/json" },
-        body: JSON.stringify(this.#context ? { context: this.#context } : {}),
-        credentials: "same-origin",
-        signal
-      },
-      "session_failed"
-    );
+    const source = this.#source;
+    const response = await this.#requestSession(source, {
+      method: "POST",
+      headers: { Accept: "application/json", "Content-Type": "application/json" },
+      body: JSON.stringify(
+        source.kind === "public" ? { embedId: source.embedId } : this.#context ? { context: this.#context } : {}
+      ),
+      credentials: source.kind === "public" ? "omit" : "same-origin",
+      signal
+    });
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "session_failed",
         `Assistant session failed (${response.status})`,
-        true,
-        response.status
+        serviceCode === void 0 || !UNRETRYABLE_SERVICE_CODES.has(serviceCode),
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     let value;
@@ -23583,6 +23620,34 @@ var DefaultAssistantClient = class {
       );
     }
   }
+  /**
+   * The mint, with the one failure a public page hits that an in-app embed cannot.
+   *
+   * A page that loads the embed script and then blocks `connect-src` fails here as a bare network
+   * rejection — no status, no body, nothing to read. "Assistant request failed" sends a developer
+   * hunting through their own code; naming the directive and the origin ends the search. The message
+   * covers a plain outage too, because from inside the browser the two are indistinguishable.
+   */
+  async #requestSession(source, init) {
+    try {
+      return await this.#fetch(source.url, init);
+    } catch (error51) {
+      if (init.signal?.aborted) throw error51;
+      if (source.kind !== "public") {
+        throw clientError("session_failed", "Assistant request failed", true, void 0, {
+          cause: error51
+        });
+      }
+      throw clientError(
+        "session_failed",
+        `Assistant could not reach ${new URL(source.url).origin}. If the page sets a Content-Security-Policy, allow that origin in connect-src (and in script-src and frame-src).`,
+        true,
+        void 0,
+        { cause: error51 },
+        "blocked_by_page"
+      );
+    }
+  }
   async #request(input, init, failureCode) {
     try {
       return await this.#fetch(input, init);
@@ -23704,9 +23769,14 @@ async function readStableErrorCode(response) {
   if (!isRecord4(value) || typeof value.code !== "string") return void 0;
   return /^[A-Za-z0-9_.-]{1,64}$/.test(value.code) ? value.code : void 0;
 }
-function clientError(code, message, retryable, status, options) {
+function clientError(code, message, retryable, status, options, serviceCode) {
   return new AssistantClientError(
-    { code, ...status === void 0 ? {} : { status }, retryable },
+    {
+      code,
+      ...status === void 0 ? {} : { status },
+      retryable,
+      ...serviceCode === void 0 ? {} : { serviceCode }
+    },
     message,
     options
   );